Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
May

CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

kphonekphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read...CVE-2006-2442Fix available4.6 MediumMay 18, 2006
pioneers meta-serverPioneers meta-server before 0.9.55, when the server-console is not installed, allows remote...CVE-2006-2441Fix available5.0 MediumMay 18, 2006
imagemagickHeap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow...CVE-2006-2440Fix available7.5 HighMay 18, 2006
caucho technology resinDirectory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc...CVE-2006-24385.0 MediumMay 17, 2006
caucho technology resinThe viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18...CVE-2006-2437Public exploit5.0 MediumMay 17, 2006
ibm websphere application serverWebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP...CVE-2006-24367.5 HighMay 17, 2006
ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and...CVE-2006-24356.4 MediumMay 17, 2006
ibm websphere application serverUnspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration...CVE-2006-24345.0 MediumMay 17, 2006
ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5,...CVE-2006-243310.0 HighMay 17, 2006
ibm websphere application serverIBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier...CVE-2006-24327.5 HighMay 17, 2006
ibm websphere application serverCross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port ...CVE-2006-2431Public exploit4.3 MediumMay 17, 2006
ibm websphere application serverIBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7...CVE-2006-243010.0 HighMay 17, 2006
ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5,...CVE-2006-242910.0 HighMay 17, 2006
duware dubanner project dubanneradd.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading...CVE-2006-24287.5 HighMay 17, 2006
clam anti-virus clamav, clamxav +1 morefreshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop...CVE-2006-24277.2 HighMay 17, 2006
sun jdk, jre, sdk +2 moreSun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6...CVE-2006-2426Public exploitEPSS 13.0%6.4 MediumMay 17, 2006
phpremoteviewMultiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10...CVE-2006-2425Public exploit4.3 MediumMay 17, 2006
ezusermanagerPHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals...CVE-2006-2424Public exploit5.1 MediumMay 17, 2006
swsoft confixxCross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote...CVE-2006-2423Public exploit4.3 MediumMay 17, 2006
coinsoft technologies phpcoinphpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote...CVE-2006-24225.0 MediumMay 17, 2006
pragma systems fortresssshStack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute...CVE-2006-24217.5 HighMay 17, 2006
caucho technology resinDirectory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote...CVE-2006-19537.8 HighMay 17, 2006
mozilla bugzillaBugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct...CVE-2006-24204.3 MediumMay 16, 2006
php directory listing scriptCross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote...CVE-2006-24194.3 MediumMay 16, 2006
phpmyadminCross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow...CVE-2006-2418Fix available6.8 MediumMay 16, 2006
phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote...CVE-2006-2417Fix available4.3 MediumMay 16, 2006
e107SQL injection vulnerability in class2.php in e107 0.7.2 and earlier allows remote attackers to...CVE-2006-24165.1 MediumMay 16, 2006
flexchatMultiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote...CVE-2006-24155.8 MediumMay 16, 2006
timo sirainen dovecotDirectory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list...CVE-2006-2414Fix available5.0 MediumMay 16, 2006
gnunetGNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite...CVE-2006-2413Public exploitFix available5.0 MediumMay 16, 2006
raydiumThe raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows...CVE-2006-2412Public exploit5.0 MediumMay 16, 2006
raydiumBuffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and...CVE-2006-2411Public exploit7.5 HighMay 16, 2006
raydiumraydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows...CVE-2006-2410Public exploit5.0 MediumMay 16, 2006
raydiumFormat string vulnerability in the raydium_log function in console.c in Raydium before SVN...CVE-2006-2409Public exploit4.6 MediumMay 16, 2006
raydiumMultiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute...CVE-2006-2408Public exploit7.5 HighMay 16, 2006
freeftpd, freesshd, weonlydo wodsshserver +2 moreStack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO,...CVE-2006-2407Public exploitEPSS 71.9%7.5 HighMay 16, 2006
unclassified newsboard newsboardDirectory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d...CVE-2006-2406Public exploit2.6 LowMay 16, 2006
unclassified newsboard newsboardDirectory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1...CVE-2006-2405Public exploit6.8 MediumMay 16, 2006
radscripts radlanceDirectory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote...CVE-2006-2404Public exploit6.4 MediumMay 16, 2006
filezillaBuffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands...CVE-2006-24037.5 HighMay 16, 2006
outgunBuffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and...CVE-2006-2402Public exploit5.0 MediumMay 16, 2006
outgunThe leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers...CVE-2006-2401Public exploit7.8 HighMay 16, 2006
outgunThe leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers...CVE-2006-2400Public exploit7.8 HighMay 16, 2006
outgunStack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp...CVE-2006-2399Public exploit7.5 HighMay 16, 2006
gphotosDirectory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers...CVE-2006-2398Public exploit5.0 MediumMay 16, 2006
gphotosMultiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote...CVE-2006-2397Public exploit5.8 MediumMay 16, 2006
phpodpCross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject...CVE-2006-2396Public exploit5.8 MediumMay 16, 2006
popsoft digital popphotoPHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in...CVE-2006-2395Public exploit5.0 MediumMay 16, 2006
turnkey web tools php live helperCross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote attackers...CVE-2006-23945.8 MediumMay 16, 2006
empire server serverThe client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of...CVE-2006-2393Public exploit5.0 MediumMay 16, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open